initial

Student User

2020-07-07 b0e84db1ee812b27117b3dd662103e8c9178822f

initial

 config/htpasswd-secret-data

New file
@@ -0,0 +1,3 @@
admin:$apr1$7YEkhvEe$mb3kTDJNcArX8JBs0zHSI.
developer:$apr1$bqT3hyf5$6APg0X7rBYzHs1eU4n1pX/
testuser:$apr1$m2dUk.Kv$zr4z1IPsETNscgSfviZEG0

 config/kustomization.yaml

New file
@@ -0,0 +1,11 @@
resources:
- oauth.yaml
- project-leaders.yaml
- self-provisioners.yaml
secretGenerator:
- name: htpasswd-secret
  namespace: openshift-config
  files:
  - htpasswd=htpasswd-secret-data
generatorOptions:
  disableNameSuffixHash: true

 config/oauth.yaml

New file
@@ -0,0 +1,14 @@
apiVersion: config.openshift.io/v1
kind: OAuth
metadata:
  annotations:
    release.openshift.io/create-only: "true"
  name: cluster
spec:
  identityProviders:
  - htpasswd:
      fileData:
        name: htpasswd-secret
    mappingMethod: claim
    name: htpasswd_provider
    type: HTPasswd

 config/project-leaders.yaml

New file
@@ -0,0 +1,6 @@
apiVersion: user.openshift.io/v1
kind: Group
metadata:
  name: project-leaders
users:
  - developer

 config/self-provisioners.yaml

New file
@@ -0,0 +1,14 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  annotations:
    rbac.authorization.kubernetes.io/autoupdate: "false"
  name: self-provisioners
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: self-provisioner
subjects:
- apiGroup: rbac.authorization.k8s.io
  kind: Group
  name: project-leaders